PT-2006-5281 · Php · Php

Published 2006-08-31 · Updated 2018-10-30 · CVE-2006-4481

Mitre

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

The (1) file exists and (2) imap reopen functions in PHP before 5.1.5 do not check for the safe mode and open basedir settings, which allows local users to bypass the settings. NOTE: the error log function is covered by CVE-2006-3011, and the imap open function is covered by CVE-2006-1017.

Fix

Related Identifiers

CVE-2006-4481

Affected Products

Php

References · 14

• http://secunia.com/advisories/21842 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4481 · Security Note
• http://secunia.com/advisories/21546 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_52_php.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:162 · Vendor Advisory
• http://ubuntu.com/usn/usn-342-1 · Vendor Advisory
• http://secunia.com/advisories/21768 · Vendor Advisory
• http://php.net/release_5_1_5.php · Patch
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:162 · Note
• http://vupen.com/english/advisories/2006/3318 · Note
• http://securityfocus.com/bid/19582 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4481 · Note
• http://frsirt.com/english/advisories/2006/3318 · Note
• http://secunia.com/advisories/22039 · Note